Could you please check your code once as the referenced file M1.txt is a local path file whereas the command arguments show iinput hdfs path. ... View more

To disable the SPNEGO authentication for the Hadoop services, modify the following properties related to the service    Ambari Web > Services > HDFS > Configs >  Advanced core-site: hadoop.http.authentication.simple.anonymous.allowed = true hadoop.http.authentication.type = simple    It will require the dependent / affected services to be restarted. ... View more

Yes, you can follow below steps to disable SPNEGO authentication From the Clusters tab, select the service (HDFS, MapReduce, or YARN) for which you want to disable authentication. Click the Configuration tab. Under the Scope filter, click service_name (Service-Wide). Under the Category filter, click Security to display the security configuration options. In the Enable Kerberos Authentication for HTTP Web-Consoles setting, uncheck the box to disable authentication requirement for the selected service_name (Service-Wide). Click Save Changes to save the change.  This will require service restart ... View more

For Windows 10, you need to download and install the MIT Kerberos Client: Visit the MIT Kerberos Distribution Page. Download and install (typical installation) the appropriate MIT Kerberos client for Windows - Windows 4.1 64-bit version. The default location of the Kerberos configuration file on Windows machine is "C:\ProgramData\MIT\Kerberos5\krb5.ini" (this is hidden file) Copy the contents from the /etc/krb5.conf file from one of the hosts in the Hadoop cluster (from Linux) into the krb5.ini file on Windows, save the changes and exit. Configure the following environment properties for MIT Kerberos by visiting Control Panel -> System -> Advanced -> Environment Variables on Windows: KRB5_CONFIG: Path of the Kerberos ini file. KRB5CCNAME: Path of the Kerberos credential cache file. Save the changes and reboot the machine. Open MIT Kerberos Ticket Manager and supply the appropriate principal and password to have a valid TGT to authenticate to Kerberos Web Consoles: Configure browser to use SPNEGO to negotiate Kerberos authentication and then try to access the web UI ... View more

What is the windows version being used here? ... View more

httpFS hostname is the hostname of the web UI you want access to. This command is used to map the domain name being used by cluster nodes to the kerberos REALM they belong to.  A specific hostname with domainname can be configured, or all hosts in a domain with a "." before the domain or subdomain.  Eg: C:\Windows\system32>ksetup /addhosttorealmmap .example.com CLUSTER.REALM     It can be run multiple times to add specific domains/hosts to the mapping to the CLUSTER.REALM. ... View more

@saivenkatg55    You should be executing the commands as windows admin user only with corresponding realm and kdc parameters ... View more

 @saivenkatg55  There are extended desktop configuration items necessary to clue the windows desktop in to what REALM and KDC the cluster is using, as well as what domain names (the ones used by the cluster) map to which kerberos REALM.   You need to run this on windows cmd as admin   ksetup /addkdc <REALM> <KDC hostname> ksetup /addhosttorealmmap <httpFS hostname> <REALM>   and set SPNEGO settings on browser Refer: https://docs.cloudera.com/documentation/enterprise/latest/topics/cdh_sg_browser_access_kerberos_protected_url.html ... View more

Hi @eMazarakis, Please check if the log_threshold parameter in oozie has been set to ERROR. This should be changed to INFO in order to get the log messages. Please update this parameter and share results. You can follow the below steps: Login to Cloudera Manager -> Clusters -> Oozie -> Configuration -> Oozie Server Logging Threshold -> Set to INFO and restart the oozie service. Regards, Paras ... View more